Date: Mon, 28 Jun 2021 13:22:47 +0200 From: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl> To: =?UTF-8?Q?=c3=96zkan_KIRIK?= <ozkan.kirik@gmail.com>, freebsd-pf@freebsd.org Subject: Re: pfctl -P -ss -vv -- sometimes eats cpu and becomes unkillable Message-ID: <fe199484-b219-4dbf-385d-62c7d0902bf9@plan-b.pwste.edu.pl> In-Reply-To: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com> References: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--E4GAuRboucT9HTHR5UeYDTPfqUCB3V1pl
Content-Type: multipart/mixed; boundary="HnhsCDC4zqNXTCdecXVv7IRjAfYadAeG2";
protected-headers="v1"
From: Marek Zarychta <zarychtam@plan-b.pwste.edu.pl>
To: =?UTF-8?Q?=c3=96zkan_KIRIK?= <ozkan.kirik@gmail.com>,
freebsd-pf@freebsd.org
Message-ID: <fe199484-b219-4dbf-385d-62c7d0902bf9@plan-b.pwste.edu.pl>
Subject: Re: pfctl -P -ss -vv -- sometimes eats cpu and becomes unkillable
References: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com>
In-Reply-To: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com>
--HnhsCDC4zqNXTCdecXVv7IRjAfYadAeG2
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
W dniu 26.06.2021 o=C2=A021:38, =C3=96zkan KIRIK pisze:
> Hi,
>=20
> pfctl -P -ss -vv command cannot finish and eats %100 of single core cpu=
> when number of states is over 50.000.
> Even killall -9 pfctl doesn't help. process cannot be killed.
>=20
> I'm using FreeBSD stable/12 that pulled at 2021-06-05.
> State policy is configured as floating. I don't know if it matters
> switching to if-bound.
>=20
> Do you have any suggestions to overcome this problem?
>=20
> Regards,
>=20
PF on stable/1{2,3} got some enhancements lately and displaying states
might be now slow (really _SLOW_). Please try to run backed up pfctl(8)
binary for displaying states (works in my case), if you have one. If you
can't find older pfctl binary, then please try your luck with the one
extracted from 12.2-RELEASE install.
Best regards,
--=20
Marek Zarychta
--HnhsCDC4zqNXTCdecXVv7IRjAfYadAeG2--
--E4GAuRboucT9HTHR5UeYDTPfqUCB3V1pl
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"
-----BEGIN PGP SIGNATURE-----
wsB5BAABCAAjFiEEMOqvKm6wKvS1/ZeCdZ/s//1SjSwFAmDZsQcFAwAAAAAACgkQdZ/s//1SjSwu
Kwf/ZCSIjXN3noKkZjEBx+eve3UsuwmlcN/uTcYY3ClqKP++MfUvr3kzr28VgmlWvCYOo4VdUvsd
MZANa3Fnuq4FsN7ivYniPb1lEqPC78lWXvxaBPUXHn1lzHMdMh17oqowcUkBIQ95qJr8q3iuB9aA
1LpvcsTC+bdLwHSbBt/HVsbXCl2JZab0mHAQoLkmE/eUeYzF27glSnH2bpRf5NsCKOYoQyBfz9NX
suDHbe6yoVI4JEbXNY3qkUACizYqE+cJYfT26qnTD54hrXTU+nxsWSeUad13yEn7KvmAgbcZbXIP
PDljtUx1I6YXEh0Md8duvLqGgcZmKGAyIXxD+opKYQ==
=pQRT
-----END PGP SIGNATURE-----
--E4GAuRboucT9HTHR5UeYDTPfqUCB3V1pl--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?fe199484-b219-4dbf-385d-62c7d0902bf9>